EP3300294B1

EP3300294B1 - Data encryption apparatus and method, and data decryption apparatus and method

Info

Publication number: EP3300294B1
Application number: EP15892654.3A
Authority: EP
Inventors: Kyu-Young CHOI; Duk-Jae MOON; Ji-Hoon Cho
Original assignee: Samsung SDS Co Ltd
Current assignee: Samsung SDS Co Ltd
Priority date: 2015-05-19
Filing date: 2015-06-30
Publication date: 2023-06-07
Anticipated expiration: 2035-06-30
Also published as: WO2016186241A1; KR20160136023A; CN107637010B; JP2018515815A; EP3300294A4; EP3300294A1; CN107637010A; KR101847492B1; US20180139041A1; JP6665204B2

Description

[Technical Field]

Embodiments set forth herein relate to data encryption and decryption technology.

[Background Art]

If data is encrypted using a conventional block encryption algorithm, when an cryptographic key is exposed to an attacker, the encrypted data may be decrypted, and thus, the data may be exposed. Accordingly, protecting/managing the cryptographic key is a very important issue.
Generally, in data encryption using a block cipher, the length of an cryptographic key, the size of an encrypted block, and a number of rounds are factors influencing security. Among such factors, a mode of operation in which a message is divided and encrypted in units of blocks plays an important role. In a block encryption algorithm employing the mode of operation, encryption is performed in units of blocks and the same cryptographic key is used for all the blocks.
However, in the data encryption using the conventional block encryption algorithm, the number of encrypted data blocks increases as the length of data to be encrypted increases. Thus, the data is encrypted using the encryption algorithm a number of times corresponding to the number of the encrypted data blocks. Accordingly, since a data encryption speed decreases as the amount of data increases, it is difficult to use the data encryption using the conventional block encryption algorithm when a large amount of data is encrypted, i.e., when encryption speed is important. US 2004/028227 A1 discloses a method of partially encrypting streaming media: receiving media in a streaming-media format; partitioning the stream-formatted media into cloak data and non-cloak data; and encrypting the cloak data such that less than all of the stream-formatted media is encrypted.
EL-MAHALLAWY M S ET AL, "Robust Blind and Secure Biometric Watermarking Based on Partial Multi-Map Chaotic Encryption", NEW TECHNOLOGIES, MOBILITY AND SECURITY (NTMS), 2011 4TH IFIP INTERNATIONAL CONFERENCE ON, IEEE, 7 February 2011 proposes a novel Commutative Watermarking and Partial Encryption (CWPE) algorithm using single level 2-Dimension Discrete Wavelet Transform (CWPE 2D DWT) and Multi-Map Orbit Hopping Chaotic System (MMOH-CS).
A further prior art solution is disclosed in document US 2012/281832 A1 .

[Disclosure]

[Technical Problem]

Embodiments set forth herein are directed to a new technique for encrypting data and decrypting the ciphertext data using a block cipher scheme and an encoding scheme, which allows encrypting and decrypting data in a fast and secure way.

[Technical Solution]

This object is solved by the subject matter of the independent claims.
Preferred embodiments are defined by the dependent claims.
According to one aspect of the present embodiments, a data encryption apparatus includes a divider configured to divide data into a plurality of plaintext blocks; an encryptor configured to encrypt at least one among some blocks of the plurality of plaintext blocks and an initial value for encrypting the data using an cryptographic key-based block encryption scheme; and an encoder configured to encode remaining plaintext blocks, which are not encrypted by the block encryption scheme, using a non-cryptographic key-based encoding scheme.
The block encryption scheme may include an encryption scheme using a symmetric key or an asymmetric key.
The block encryption scheme may include a white box-based encryption scheme.
The non-cryptographic key-based encoding scheme may include an encoding scheme using at least one among a logical operation, a one-way function, a one-way permutation, and a logical function.
The initial value may include an initialization vector or a counter value.
The encryptor may encrypt the some blocks using the initialization vector or the counter value.
The encoder may encode the remaining plaintext blocks using the initialization vector or the counter value.
The encoder may sequentially encode each of the remaining plaintext blocks using a previously generated ciphertext block.
The encoder may sequentially encode each of the remaining plaintext blocks using a previously generated ciphertext block and a plaintext block used to generate the previously generated ciphertext block.
According to another aspect of the present embodiments, a data decryption apparatus includes a decryptor configured to decrypt some blocks of encrypted data using an cryptographic key-based block decryption scheme, and a decoder configured to decode remaining blocks of the encrypted data using a non-cryptographic key-based decoding scheme.
The block decryption scheme may include a decryption scheme using a symmetric key or an asymmetric key.
The block decryption scheme may include a white box-based decryption scheme.
The non-cryptographic key-based decoding scheme may include a decoding scheme using at least one among a logical operation, a one-way function, a one-way permutation, and a logical function.
The decoder may decode the remaining blocks using an initialization vector or a counter value used to generate the encrypted data.
The decoder may sequentially decode each of the remaining blocks using a ciphertext block used to generate a previously generated plaintext block.
The decoder may sequentially decode each of the remaining blocks using a previously generated plaintext block and a ciphertext block used to generate the previously generated plaintext block.
According to another aspect of the present embodiments, a data encryption method includes dividing data into a plurality of plaintext blocks; encrypting at least one among some blocks of the plurality of plaintext blocks and an initial value for encrypting the data using an cryptographic key-based block encryption scheme; and encoding remaining plaintext blocks using a non-cryptographic key-based encoding scheme.
The block encryption scheme may include an encryption scheme using a symmetric key or an asymmetric key.
The block encryption scheme may include a white box-based encryption scheme.
The non-cryptographic key-based encoding scheme may include an encoding scheme using at least one among a logical operation, a one-way function, a one-way permutation, and a logical function.
The initial value may include an initialization vector or a counter value.
The encrypting of at least one among some blocks of the plurality of plaintext blocks and the initial value for encrypting the data may include encrypting the some blocks using the initialization vector or the counter value.
The encoding of the remaining plaintext blocks may include encoding the remaining blocks using the initialization vector or the counter value.
The encoding of the remaining plaintext blocks may include sequentially encoding each of the remaining blocks using a previously generated ciphertext block.
The encoding of the remaining plaintext blocks may include sequentially encoding each of the remaining blocks using a previously generated ciphertext block and a plaintext block used to generate the previously generated ciphertext block.
According to another aspect of the present embodiments, a data decryption method includes decrypting some blocks of encrypted data using an cryptographic key-based block decryption scheme, and decoding remaining blocks of the encrypted data using a non-cryptographic key-based decoding scheme.
The block decryption scheme may include a decryption scheme using a symmetric key or an asymmetric key.
The block decryption scheme may include a white box-based decryption scheme.
The non-cryptographic key-based decoding scheme may include a decoding scheme using at least one among a logical operation, a one-way function, a one-way permutation, and a logical function.
The decoding of the remaining blocks may include generating plaintext blocks of the remaining blocks using an initialization vector or a counter value used to generate the encrypted data.
The decoding of the remaining blocks may include sequentially decoding each of the remaining blocks using a ciphertext block used to generate a previously generated plaintext block.
The decoding of the remaining blocks may include sequentially decoding each of the remaining blocks using a previously generated plaintext block and a ciphertext block used to generate the previously generated plaintext block.
According to another aspect of the present embodiments, there is provided a computer program stored in a recording medium in association with hardware, the computer program causing a computer to execute: dividing data into a plurality of plaintext blocks; encrypting at least one among some blocks of the plurality of plaintext blocks and an initial value for encrypting the data using an cryptographic key-based block encryption scheme; and encoding remaining plaintext blocks using a non-cryptographic key-based encoding scheme.
According to another aspect of the present embodiments, there is provided a computer program stored in a recording medium in association with hardware, the computer program causing a computer to execute: decrypting some blocks of encrypted data using an cryptographic key-based block decryption scheme; and decoding remaining blocks of the encrypted data using a non-cryptographic key-based decoding scheme.

[Advantageous Effects]

According to embodiments of the present embodiments, some ciphertext blocks are generated using a block encryption scheme and remaining ciphertext blocks are processed using an encoding scheme to generate encrypted data, thereby reducing the amount of calculation for data encryption. Accordingly, a large amount of data can be quickly encrypted.

[Description of Drawings]

FIG. 1 is a block diagram of a data encryption apparatus according to an embodiment of the present embodiments.
FIG. 2 is a block diagram of a data decryption apparatus according to an embodiment of the present embodiments.
FIGS. 3a and 3b are diagrams illustrating an electronic code book (ECB) mode according to an embodiment of the present embodiments.
FIGS. 4a and 4b are diagrams illustrating a cipher block chaining (CBC) mode according to an embodiment of the present embodiments.
FIGS. 5a and 5b are diagrams illustrating a CBC mode according to another embodiment of the present embodiments.
FIGS. 6a and 6b are diagrams illustrating a CBC mode according to another embodiment of the present embodiments.
FIGS. 7a and 7b are diagrams illustrating a propagating cipher block chaining (PCBC) mode according to an embodiment of the present embodiments.
FIGS. 8a and 8b are diagrams illustrating a PCBC mode according to another embodiment of the present embodiments.
FIGS. 9a and 9b are diagrams illustrating a PCBC mode according to another embodiment of the present embodiments.
FIGS. 10a and 10b are diagrams illustrating a cipher feedback (CFB) mode according to an embodiment of the present embodiments.
FIGS. 11a and 11b are diagrams illustrating a CFB mode according to another embodiment of the present embodiments.
FIGS. 12a and 12b are diagrams illustrating a CFB mode according to another embodiment of the present embodiments.
FIGS. 13a and 13b are diagrams illustrating an output feedback (OPB) mode according to an embodiment of the present embodiments.
FIGS. 14a and 14b are diagrams illustrating an OFB mode according to another embodiment of the present embodiments.
FIGS. 15a and 15b are diagrams illustrating a counter (CTR) mode according to an embodiment of the present embodiments.
FIGS. 16a and 16b are diagrams illustrating a CTR mode according to another embodiment of the present embodiments.
FIGS. 17a and 17b are diagrams illustrating a CTR mode according to another embodiment of the present embodiments.
FIG. 18 is a flowchart of a data encryption method according to an embodiment of the present embodiments.
FIG. 19 is a flowchart of a data decryption method according to an embodiment of the present embodiments.

[Modes of the Embodiments]

Hereinafter, exemplary embodiments of the present embodiments will be described with reference to the accompanying drawings. The following descriptions are provided to assist comprehensive understanding of methods, apparatuses, and/or systems described herein. However, the following descriptions are merely examples, and the present embodiments is not limited thereto.
In describing embodiments of the present embodiments, well-known techniques related to the present embodiments are not described in detail if it is determined that they would obscure the embodiments due to unnecessary detail. Terms used herein have been defined in consideration of functions of the present embodiments, and may vary according to an intention of a user or an operator, a precedent, or the like. Accordingly, it will be understood that the terms should be interpreted as having a meaning that is consistent with their meaning in the context of the specification. The terms used in the detailed description are for the purpose of describing embodiments of the present embodiments only and is not intended to be limiting of the present embodiments. As used herein, the singular forms are intended to include the plural forms as well, unless the context clearly indicates otherwise. It will be further understood that the terms "comprise," "comprising," "include" and/or "including," when used herein, specify the presence of stated features, integers, steps, operations, elements, and/or groups thereof, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, and/or groups thereof.
FIG. 1 is a diagram illustrating a data encryption apparatus according to an exemplary embodiment. FIG. 2 is a diagram illustrating a data decryption apparatus according to an exemplary embodiment. In some embodiments, a data encryption apparatus 100 and a data decryption apparatus 200 which are examples may be implemented or included in different computing apparatuses. Each of the computing apparatuses may include one or more processors, and a computer-readable storage medium such as a memory accessible by the one or more processors. The computer-readable storage medium may be located inside or outside the processor and connected to the processor using various well-known means. The computer-readable storage medium may store a computer-executable command. The processor may execute a command stored in the computer-readable storage medium. When the command is executed by the processor, the computing apparatus may perform an operation according to an exemplary embodiment.
FIG. 1 is a block diagram of the data encryption apparatus 100 according to an embodiment of the present embodiments.
Referring to FIG. 1, the data encryption apparatus 100 according to an embodiment of the present embodiments includes a divider 110, an encryptor 130, and an encoder 150.
The data encryption apparatus 100 is configured to generate encrypted data (for example, digital ciphertext) by encrypting plaintext data (for example, digital plaintext).
The divider 110 divides plaintext data to be encrypted into a plurality of plaintext blocks. For example, the divider 110 may generate a plurality of plaintext blocks by dividing the plaintext data in units of blocks having a certain size. In this case, for example, a padding process of padding a predefined value in the last block may be performed to equalize the sizes of the plurality of plaintext blocks.
The encryptor 130 encrypts at least one among some of the plurality of plaintext blocks and an initial value for encryption using an cryptographic key-based block encryption scheme.
The cryptographic key-based block encryption scheme may include various types of encryption schemes for encrypting data in units of blocks using a symmetric key or an asymmetric key. For example, the encryptor 130 may generate a ciphertext block using a well-known block encryption algorithm using a symmetric key or an asymmetric key, such as an advanced encryption standard (AES), a data encryption standard (DES), 3DES, Blowfish, an international data encryption algorithm (IDEA), RC2, RC5, RC6, SEED, ARIA, Rivest Shamir Adleman (RSA), a digital signature algorithm (DSA), an elliptic curve cryptosystem (ECC), Elgamal, a white box-based encryption algorithm, etc.
The initial value may include, for example, an initialization vector (IV) that is an arbitrary bit string or a counter value that increases by 1 each time a plaintext block is encrypted. In this case, the encryptor 130 may generate ciphertext blocks by encrypting the initial value (for example, an initialization vector or an initial counter value) using the cryptographic key-based block encryption scheme according to a mode of operation which is to be described below, or by encrypting some of the plurality of plaintext blocks using the initial value (for example, an initialization vector or an initial counter value) according to the cryptographic key-based block encryption scheme.
The encoder 150 encodes the other plaintext blocks, which have not been encrypted by the encryptor 130, using a non-cryptographic key-based encoding scheme.
In one embodiment, the non-cryptographic key-based encoding scheme may include various types of encoding schemes that may hide data without using an cryptographic key. For example, the non-cryptographic key-based encoding scheme may include an encoding scheme using at least one among a logical operation, a one-way function, a one-way permutation, and a logical function consisting of a plurality of logical operations.
According to an embodiment of the present embodiments, the encoder 150 may generate ciphertext blocks by encoding plaintext blocks, which have not been encrypted by the encryptor 130, using the initial value (for example, an initialization value or a counter value) according to a mode of operation which is to be described below.
According to an embodiment of the present embodiments, the encoder 150 may generate ciphertext blocks by sequentially encoding the plaintext blocks, which have not been encrypted by the encryptor 130, according to an operation mode that is to be described below, using either a ciphertext block generated in a previous operation or the ciphertext block generated in the previous operation and a plaintext block used to generate the ciphertext block.
According to an embodiment of the present embodiments, the encryptor 130 and the encoder 150 may encrypt plaintext data using a method similar to a conventional mode of operation for block encryption. For example, the encryptor 130 and the encoder 150 may encrypt plaintext data using one mode of operation among an electronic code book (ECB) mode, a cipher block chaining (CBC) mode, a propagating cipher block chaining (PCBC) mode, a cipher feedback (CFB) mode, an output feedback (OFB), and a counter (CTR) mode. However, one encryption algorithm is applied to encrypting plaintext data in the conventional mode of operation used for a block encryption algorithm, whereas a block encryption scheme and an encoding scheme are applied to encrypting plaintext data in the mode of operation according to an embodiment of the present embodiments. That is, data encrypted according to an embodiment of the present embodiments includes ciphertext blocks generated using the cryptographic key-based block encryption scheme and ciphertext blocks generated using the non-cryptographic key-based encoding scheme. A specific operation according to a mode of operation will be described in detail below.
According to an embodiment of the present embodiments, the data encryption apparatus 100 may further include an initial value generator 170 configured to generate the initial value when encrypted data is generated according to a mode of operation using an initial value (for example, an initialization vector or a counter value).
The divider 110, the encryptor 130, the encoder 150, and the initial value generator 170 are classified according to functions performed in the data encryption apparatus 100. In the embodiment of FIG. 1, the divider 110, the encryptor 130, the encoder 150, and the initial value generator 170 are illustrated as separate components but embodiments are not limited thereto. The divider 110, the encryptor 130, the encoder 150, and the initial value generator 170 may not be clearly classified according to specific operations.
In the above-described example, the encryptor 130 performs encryption using a well-known specific encryption algorithm but embodiments are not limited thereto. For example, on the basis of a predetermined operation mode, the encryptor 130 and the encoder 150 may encrypt plaintext data using an encryption algorithm designed to encrypt some of plaintext data using a symmetric key or an asymmetric key according to a block encryption scheme and encode the remaining plaintext data according to a certain encoding scheme that does not use an cryptographic key.
In one embodiment, the divider 110, the encryptor 130, the encoder 150, and the initial value generator 170 may be implemented in a computing apparatus including one or more processors and a computer-readable recording medium connected to the processor. The computer-readable recording medium may be located inside or outside the processor, and connected to the processor using various well-known means. The processor located in the computing apparatus may control the computing apparatus to operate according to an exemplary embodiment described herein. For example, the processor may execute a command stored in the computer-readable recording medium, and the command stored in the computer-readable recording medium may be configured, when executed by the processor, to cause the computing apparatus to perform operations according to an exemplary embodiment described herein.
FIG. 2 is a block diagram of the data decryption apparatus 200 according to an embodiment of the present embodiments.
The data decryption apparatus 200 of FIG. 2 is configured to generate plaintext data by decrypting data encrypted by the data encryption apparatus 100 of FIG. 1.
Referring to FIG. 2, the data decryption apparatus 200 according to an embodiment of the present embodiments includes a decryptor 210 and a decoder 230.
The decryptor 210 may decrypt some blocks of encrypted data using an cryptographic key-based block decryption scheme. For example, as described above with reference to FIG. 1, data encrypted by the data encryption apparatus 100 may include a ciphertext block encrypted using the cryptographic key-based block encryption scheme and a ciphertext block encoded using the non-cryptographic key-based encoding scheme. Thus, according to an embodiment of the present embodiments, the decryptor 210 may decrypt a ciphertext block of encrypted data, which was encrypted using the cryptographic key-based block encryption scheme, using the encryption-based block decryption scheme.
The encryption-based block decryption scheme may include various types of decryption methods of decrypting data in units of blocks using a symmetric key or an asymmetric key. For example, the decryptor 210 may decrypt some of the ciphertext blocks using a well-known block decryption algorithm using a symmetric key or an asymmetric key, such as the AES, the DES, the 3DES, Blowfish, the IDEA, RC2, RC5, RC6, SEED, ARIA, RSA, the DSA, the ECC, ELGmal, the white box-based decryption algorithm, etc.
The decoder 230 may decode ciphertext blocks of encrypted data that have not been decrypted by the decryptor 210 using a non-cryptographic key-based decoding scheme. The non-cryptographic key-based decoding scheme may include a decoding scheme employing at least one among a logical operation, a one-way function, a one-way permutation, and a logical function.
According to an embodiment of the present embodiments, the decoder 230 may generate plaintext blocks by decoding ciphertext blocks, which have not been decrypted by the decryptor 210, using an initial value or a counter value according to a mode of operation mode for decrypting encrypted data.
According to an embodiment of the present embodiments, the decoder 230 may generate plaintext blocks by sequentially decoding ciphertext blocks, which have not been decrypted by the decryptor 210, according to the mode of operation for decrypting encrypted data using either a ciphertext block used to generate a plaintext block generated in a previous operation or the plaintext generated in the previous operation and the ciphertext block used to generate the previous plaintext block.
According to an embodiment of the present embodiments, the decryptor 210 and the decoder 230 may decrypt encrypted data using the same mode of operation as that used by the data encryption apparatus 100 to generate encrypted data. For example, the decryptor 210 and the decoder 230 may decrypt data encrypted using one operation mode among an ECB mode, a CBC mode, a PCBC mode, a CFB mode, an OFB mode, and a CTR mode, as will be described in detail below.
According to an embodiment of the present embodiments, the data decryption apparatus 200 may further include an initial value generator 250 configured to generate an initial value when plaintext data is generated according to a mode of operation using an initial value (for example, an initialization vector or a counter value).
The decryptor 210, the decoder 230, and the initial value generator 250 are classified according to functions performed in the data decryption apparatus 200. In the embodiment of FIG. 2, the decryptor 210, the decoder 230, and the initial value generator 250 are illustrated as separate components. However, embodiments are not limited thereto, and the decryptor 210, the decoder 230, and the initial value generator 250 may not be clearly classified in terms of specific operations.
In the above-described example, the decryptor 210 performs decryption using a well-known specific decryption algorithm but embodiments are not limited thereto. For example, on the basis of a predetermined operation mode, the decryptor 210 and the decoder 230 may generate plaintext data from encrypted data using a decryption algorithm designed to decrypt some of encrypted data using a symmetric key or an asymmetric key according to a block decryption scheme and decode the remaining encrypted data according to a certain decoding scheme that does not use an cryptographic key
In one embodiment, the decryptor 210, the decoder 230, and the initial value generator 250 may be implemented in a computing apparatus including one or more processors and a computer-readable recording medium connected to the processor. The computer-readable recording medium may be located inside or outside the processor, and connected to the processor using various well-known means. The processor located in the computing apparatus may control the computing apparatus to operate according to an exemplary embodiment described herein. For example, the processor may execute a command stored in the computer-readable recording medium, and the command stored in the computer-readable recording medium may be configured, when executed by the processor, to cause the computing apparatus to perform operations according to an exemplary embodiment described herein.
Examples of operations of the data encryption apparatus 100 and the data decryption apparatus 200 according to each mode of operation will be described in more detail below. In the following embodiments, it will be described for convenience of explanation that an AES algorithm is used as a block encryption scheme and an exclusive-or (XOR) operation or an XOR operation and a logical function are used as an encoding scheme. However, embodiments are not limited thereto.
Furthermore, in the following embodiments, it will be described that a block encryption scheme is used to generate first ciphertext. However, embodiments are not limited thereto, and two or more plaintext blocks may be encrypted using the block encryption scheme in consideration of encryption speed, etc.

1. Example using ECB mode

According to an embodiment of the present embodiments, as illustrated in FIG. 3a, the data encryption apparatus 100 may encrypt data using the ECB mode.
As illustrated in FIG. 3a, the encryptor 130 generates a ciphertext block 1 by applying a block encryption algorithm to a plaintext block 1 that is a first plaintext block among a plurality of plaintext blocks. Then, the encoder 150 may generate a ciphertext block 2, a ciphertext block 3, and a ciphertext block 4 by applying a logical function to a plaintext block 2, a plaintext block 3, and a plaintext block 4.
As illustrated in FIG. 3b, the data decryption apparatus 200 may perform a decryption operation on data encrypted as illustrated in FIG. 3a.
Referring to FIG. 3b, the decryptor 210 generates the plaintext block 1 by applying the block encryption algorithm to the ciphertext block 1 that is a first ciphertext block among a plurality of ciphertext blocks. Thereafter, the decoder 230 may generate the plaintext block 2, the plaintext block 3, and the plaintext block 4 by applying a logical function to the ciphertext block 2, the ciphertext block 3, and the ciphertext block 4.

2. Example using CBC mode

According to an embodiment of the present embodiments, as illustrated in FIG. 4a, the data encryption apparatus 100 may encrypt data using the CBC mode.
Referring to FIG. 4a, the encryptor 130 may generate a first ciphertext block (a ciphertext block 1) by performing an XOR operation on a first plaintext block (a plaintext block 1) and an initialization vector IV and applying the AES algorithm to a result of performing the XOR operation.
Then, the encoder 150 may generate ciphertext blocks 2 to 4 by performing the XOR operation on each of plaintext blocks 2 to 4 and a ciphertext block generated right before each of the ciphertext blocks 2 to 4 is generated.
In detail, the encryption operation illustrated in FIG. 4a may be expressed by Equation 1 below.
where C_i represents an i^th ciphertext block, P_i represents an i^th plaintext block, IV represents an initialization vector, E^BLOCK represents a block encryption algorithm, and XOR represents the XOR operation performed on each of the blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).
As illustrated in FIG. 4b, the data decryption apparatus 200 may perform a decryption operation on the data encrypted as illustrated in FIG. 4a.
Referring to FIG. 4b, the decryptor 210 may generate the first plaintext block (the plaintext block 1) by decrypting a first block of the encrypted data (the ciphertext block 1) using the AES algorithm and performing the XOR operation on the decrypted ciphertext block 1 and the initialization vector.
Then, the decoder 230 may generate the plaintext blocks 2 to 4 by performing the XOR operation on each of the ciphertext blocks 2 to 4 and the ciphertext block generated right before each of the ciphertext blocks 2 to 4 is generated.
In detail, the decryption operation illustrated in FIG. 4b may be expressed by Equation 2 below.
where C_i represents an i^th ciphertext block, P_i represents an i^th plaintext block, IV represents an initialization vector, D^BLOCK represents a block decryption algorithm, XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).
According to another embodiment of the present embodiments, the data encryption apparatus 100 may encrypt data using the CBC mode as illustrated in FIG. 5a.
Referring to FIG. 5a, the encryptor 130 may generate a first ciphertext block (a ciphertext block 1) by performing the XOR operation on a first plaintext block (a plaintext block 1) and an initialization vector and applying the AES algorithm to a result of performing the XOR operation.
Then, the encoder 150 may generate ciphertext blocks 2 to 4 by performing the XOR operation on each of plaintext blocks 2 to 4 and a ciphertext block generated right before each of the ciphertext blocks 2 to 4 is generated, and applying a logical function to a result of performing the XOR operation.
In detail, the encryption operation illustrated in FIG. 5a may be expressed by Equation 3 below.
where C_i represents an i^th ciphertext block, P_i represents an i^th plaintext block, IV represents an initialization vector, E^BLOCK represents a block encryption algorithm, F represents a logical function and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).
As illustrated in FIG. 5b, the data decryption apparatus 200 may perform a decryption operation on the data encrypted as illustrated in FIG. 5a.
Referring to FIG. 5b, the decryptor 210 may generate the first plaintext block (the plaintext block 1) by decrypting a first block of the encrypted data (the ciphertext block 1) using the AES algorithm, and performing the XOR operation on the decrypted ciphertext block 1 and the initialization vector.
Then, the decoder 230 may generate the plaintext blocks 2 to 4 by applying a logical function to each of the ciphertext blocks 2 to 4, and performing the XOR operation on a result of applying the logical function to each of the ciphertext blocks 2 to 4 and the ciphertext block generated right before each of the ciphertext blocks 2 to 4 is generated.
In detail, the decryption operation illustrated in FIG. 5b may be expressed by Equation 4 below.
where C_i represents an i^th ciphertext block, P_i represents an i^th plaintext block, IV represents an initialization vector, D^BLOCK represents a block decryption algorithm, F represents a logical function, and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).
According to another embodiment of the present embodiments, the data encryption apparatus 100 may encrypt data using the CBC mode as illustrated in FIG. 6a.
Referring to FIG. 6a, the encryptor 130 may generate a first ciphertext block (a ciphertext block 0) by applying the AES algorithm to an initialization vector IV.
Then, the encoder 150 may generate a ciphertext block 1 by performing the XOR operation on a plaintext block 1 and the initialization vector IV, and applying a logical function to a result of performing the XOR operation.
Then, the encoder 150 may generate ciphertext blocks 2 to 4 by performing the XOR operation on each of plaintext blocks 2 to 4 and a ciphertext block generated right before each of the ciphertext blocks 2 to 4 is generated, and applying a logical function to a result of performing the XOR operation.
In detail, the encryption operation illustrated in FIG. 6a may be expressed by Equation 5 below.
where C_i represents an i^th ciphertext block, P_i represents an i^th plaintext block, IV represents an initialization vector, E^BLOCK represents a block encryption algorithm, F represents a logical function, and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).
As illustrated in FIG. 6b, the data decryption apparatus 200 may perform a decryption operation on the data encrypted as illustrated in FIG. 6a.
Referring to FIG. 6b, the decryptor 210 may generate the initialization vector IV by decrypting a first block of the encrypted data (the ciphertext block 0) using the AES algorithm.
Then, the decoder 230 may generate the first plaintext block by applying a logical function to the ciphertext block 1, and then, performing the XOR operation on a result of applying the logical function to the ciphertext block 1 and the initialization vector IV.
Then, the decoder 230 may generate the plaintext blocks 2 to 4 by applying a logical function to each of the ciphertext blocks 2 to 4, and then, performing the XOR operation on a result of applying the logical function to each of the ciphertext blocks 2 to 4 and the ciphertext block generated right before each of the ciphertext blocks 2 to 4 is generated.
In detail, the decryption operation illustrated in FIG. 6b may be expressed by Equation 6 below.
where C_i represents an i^th ciphertext block, P_i represents an i^th plaintext block, IV represents an initialization vector, D^BLOCK represents a block decryption algorithm, F represents a logical function, and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).

3. Example using PCBC mode

According to an embodiment of the present embodiments, as illustrated in FIG. 7a, the data encryption apparatus 100 may encrypt data using the PCBC mode.
Referring to FIG. 7a, the encryptor 130 may generate a first ciphertext block (a ciphertext block 1) by performing the XOR operation on a first plaintext block of the data (a plaintext block 1) and an initialization vector IV and applying the AES algorithm to a result of performing the XOR operation.
Then, the encoder 150 may generate ciphertext blocks 2 to 4 by performing the XOR operation on each of plaintext blocks 2 to 4 together with a ciphertext block generated and a plaintext block used right before each of the ciphertext blocks 2 to 4 is generated.
In detail, the encryption operation illustrated in FIG. 7a may be expressed by Equation 7 below.
where C_i represents an i^th ciphertext block, P_i represents an i^th plaintext block, IV represents an initialization vector, E^BLOCK represents a block encryption algorithm, and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).
As shown as an example in FIG. 7b, the data decryption apparatus 200 may perform a decryption operation on the data encrypted according to the example illustrated in FIG. 7a.
Referring to FIG. 7b, the decryptor 210 may generate the first plaintext block (the plaintext block 1) by decrypting a first block of the encrypted data (the ciphertext block 1) using the AES algorithm, and then, performing the XOR operation on the decrypted ciphertext block 1 and the initialization vector IR.
Then, the decoder 230 may generate the plaintext blocks 2 to 4 by performing the XOR operation on each of the ciphertext blocks 2 to 4 together with the plaintext block generated and the ciphertext block used right before each of the plaintext blocks 2 to 4 is generated.
In detail, the decryption operation illustrated in FIG. 7b may be expressed by Equation 8 below.
where C_i represents an i^th ciphertext block, P_i represents an i^th plaintext block, IV represents an initialization vector, D^BLOCK represents a block decryption algorithm, and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).
According to another embodiment of the present embodiments, the data encryption apparatus 100 may encrypt data using the PCBC mode as illustrated in FIG. 8a.
Referring to FIG. 8a, the encryptor 130 may generate a first ciphertext block (a ciphertext block 1) by performing the XOR operation on a first plaintext block of the data (a plaintext block 1) and an initialization vector IV and applying the AES algorithm to a result of performing the XOR operation.
Then, the encoder 150 may generate ciphertext blocks 2 to 4 by performing the XOR operation on each of plaintext blocks 2 to 4 together with the ciphertext block generated and the plaintext block used right before each of the ciphertext blocks 2 to 4 is generated, and then, applying a logical function to a result of performing the XOR operation.
In detail, the encryption operation illustrated in FIG. 8a may be expressed by Equation 9 below.
where C_i represents an i^th ciphertext block, P_i represents an i^th plaintext block, IV represents an initialization vector, E^BLOCK represents a block encryption algorithm, F represents a logical function, and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).
As illustrated in FIG. 8b, the data decryption apparatus 200 may perform a decryption operation on the data encrypted as illustrated in FIG. 8a.
Referring to FIG. 8b, the decryptor 210 may generate the first plaintext block (the plaintext block 1) by decrypting a first block of the encrypted data (the ciphertext block 1) using the AES algorithm, and then, performing the XOR operation on the decrypted ciphertext block 1 and the initialization vector IR.
Then, the decoder 230 may generate the plaintext blocks 2 to 4 by applying a logical function to each of the ciphertext blocks 2 to 4, and then, performing the XOR operation on a result of applying the logical function to each of the ciphertext blocks 2 to 4, together with the plaintext block generated and the ciphertext block used right before each of the plaintext blocks 2 to 4 is generated.
In detail, the decryption operation illustrated in FIG. 8b may be expressed by Equation 10 below.
where C_i represents an i^th ciphertext block, P_i represents an i^th plaintext block, IV represents an initialization vector, D^BLOCK represents a block decryption algorithm, F represents a logical function, and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).
According to another embodiment of the present embodiments, the data encryption apparatus 100 may encrypt data using the PCBC mode as shown as an example in FIG. 9a.
Referring to FIG. 9a, the encryptor 130 may generate a first ciphertext block (a ciphertext block 0) by performing an XOR operation on a first plaintext block of the data (a plaintext block 1) with an initialization vector IV and applying the AES algorithm to a result of performing the XOR operation.
Then, the encoder 150 may generate a ciphertext block 1 by performing the XOR operation on the plaintext block 1 and the initialization vector IV, and then, applying a logical function to a result of performing the XOR operation.
Thereafter, the encoder 150 may generate ciphertext blocks 2 to 4 by performing the XOR operation on each of plaintext blocks 2 to 4 together with the ciphertext block generated and the plaintext block used right before each of the ciphertext blocks 2 to 4 is generated, and then, applying a logical function to a result of performing the XOR operation.
In detail, the encryption operation illustrated in FIG. 9a may be expressed by Equation 11 below.
where C_i represents an i^th ciphertext block, P_i represents an i^th plaintext block, IV represents an initialization vector, E^BLOCK represents a block encryption algorithm, F represents a logical function, and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).
As illustrated in FIG. 9b, the data decryption apparatus 200 may perform a decryption operation on the data encrypted as illustrated in FIG. 9a.
Referring to FIG. 9b, the decryptor 210 may generate the initialization vector IV by decrypting a first block of the encrypted data (the ciphertext block 0) using the AES algorithm.
Then, the decoder 230 may generate the first plaintext block (the plaintext block 1) by applying a logical function to the ciphertext block 1, and then, performing the XOR operation on a result of performing the logical function and the initialization vector IV.
Thereafter, the decoder 230 may generate the plaintext blocks 2 to 4 by applying a logical function to each of the ciphertext blocks 2 to 4, and then, performing the XOR operation on a result of applying the logical function to each of the ciphertext blocks 2 to 4, with the plaintext block generated and the ciphertext block used right before each of the plaintext blocks 2 to 4 is generated.
In detail, the decryption operation illustrated in FIG. 9b may be expressed by Equation 12 below.
where C_i represents an i^th ciphertext block, P_i represents an i^th plaintext block, IV represents an initialization vector, D^BLOCK represents a block decryption algorithm, F represents a logical function, and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).

4. Example using CFB mode

According to an embodiment of the present embodiments, as illustrated in FIG. 10a, the data encryption apparatus 100 may encrypt data using the CFB mode.
Referring to FIG. 10a, the encryptor 130 may generate a first ciphertext block (a ciphertext block 1) by applying the AES algorithm to an initialization vector IV, and then performing the XOR operation on a result of applying the AES algorithm to the initialization vector IV and a first plaintext block (a plaintext block 1).
Then, the encoder 150 may generate ciphertext blocks 2 to 4 by performing the XOR operation on each of plaintext blocks 2 to 4 and the ciphertext block generated right before each of the ciphertext blocks 2 to 4 is generated.
In detail, the encryption operation illustrated in FIG. 10a may be expressed by Equation 13 below.
where C_i represents an i^th ciphertext block, P_i represents an i^th plaintext block, IV represents an initialization vector, E^BLOCK represents a block encryption algorithm, and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).
As illustrated in FIG. 10b, the data decryption apparatus 200 may perform a decryption operation on the data encrypted as illustrated in FIG. 10a.
Referring to FIG. 10b, the decryptor 210 may generate the first plaintext block (the plaintext block 1) by applying the AES algorithm to the initialization vector IV, and then, performing the XOR operation on a result of applying the AES algorithm to the initialization vector IV and the first ciphertext block (the ciphertext block 1).
Then, the decoder 230 may generate the plaintext blocks 2 to 4 by performing the XOR operation on each of the ciphertext blocks 2 to 4 and the ciphertext block generated right before each of the ciphertext blocks 2 to 4 is generated.
In detail, the decryption operation illustrated in FIG. 10b may be expressed by Equation 14 below.
where C_i represents an i^th ciphertext block, P_i represents an i^th plaintext block, IV represents an initialization vector, D^BLOCK represents a block decryption algorithm, and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).
According to another embodiment of the present embodiments, the data encryption apparatus 100 may encrypt data using the CFB mode as illustrated in FIG. 11a.
Referring to FIG. 11a, the encryptor 130 may generate a first ciphertext block (a ciphertext block 1) by applying the AES algorithm to an initialization vector IV, and then, performing the XOR operation on a result of applying the AES algorithm to the initialization vector IV and a first plaintext block (a plaintext block 1).
Then, the encoder 150 may generate ciphertext blocks 2 to 4 by applying a logical function to the ciphertext block generated right before each of the ciphertext blocks 2 to 4 is generated, and then, performing the XOR operation on a result of applying the logical function to the ciphertext block and each of plaintext blocks 2 to 4.
In detail, the encryption operation illustrated in FIG. 11a may be expressed by Equation 15 below.
where C_i represents an i^th ciphertext block, P_i represents an i^th plaintext block, IV represents an initialization vector, E^BLOCK represents a block encryption algorithm, and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).
As illustrated in FIG. 11b, the data decryption apparatus 200 may perform a decryption operation on the data encrypted as illustrated in FIG. 11a.
Referring to FIG. 11b, the decryptor 210 may generate the first plaintext block (the plaintext block 1) by applying the AES algorithm to the initialization vector IV, and then, performing the XOR operation on a result of applying AES algorithm to the initialization vector IV and the first ciphertext block (the ciphertext block 1).
Then, the decoder 230 may generate the plaintext blocks 2 to 4 by applying a logical function to the ciphertext block preceding each of the ciphertext blocks 2 to 4, and then, performing the XOR operation on a result of applying the logical function and each of the ciphertext blocks 2 to 4.
In detail, the decryption operation illustrated in FIG. 11b may be expressed by Equation 16 below.
where C_i represents an i^th ciphertext block, P_i represents an i^th plaintext block, IV represents an initialization vector, D^BLOCK represents a block decryption algorithm, and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).
According to another embodiment of the present embodiments, the data encryption apparatus 100 may encrypt data using the CFB mode as illustrated in FIG. 12a.
Referring to FIG. 12a, the encryptor 130 may generate a first ciphertext block (a ciphertext block 0) by applying the AES algorithm to an initialization vector IV.
Then, the encoder 150 may generate a first ciphertext block (a ciphertext block 1) by performing the XOR operation on the initialization vector IV and a first plaintext block (a plaintext block 1)
Thereafter, the encoder 150 may generate ciphertext blocks 2 to 4 by applying a logical function to the ciphertext block generated right before each of the ciphertext blocks 2 to 4 is generated, and then, performing the XOR operation on a result of applying the logical function and each of the plaintext blocks 2 to 4.
In detail, the encryption operation illustrated in FIG. 12a may be expressed by Equation 17 below.
where C_i represents an i^th ciphertext block, P_i represents an i^th plaintext block, IV represents an initialization vector, E^BLOCK represents a block encryption algorithm, F represents a logical function, and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).
As illustrated in FIG. 12b, the data decryption apparatus 200 may perform a decryption operation on the data encrypted as illustrated in FIG. 12a.
Referring to FIG. 12b, the decryptor 210 may generate the initialization vector IV by applying the AES algorithm to the first ciphertext block (the ciphertext block 0).
Then, the decoder 230 may generate the first plaintext block (the plaintext block 1) by performing the XOR operation on the initialization vector IV and the ciphertext block 1.
Thereafter, the decoder 230 may generate the plaintext blocks 2 to 4 by applying a logical function to the ciphertext block preceding each of the ciphertext blocks 2 to 4, and then, performing the XOR operation on a result of the applying the logical function and each of the ciphertext blocks 2 to 4.
In detail, the decryption operation illustrated in FIG. 12b may be expressed by Equation 18 below.
where C_i represents an i^th ciphertext block, P_i represents an i^th plaintext block, IV represents an initialization vector, D^BLOCK represents a block decryption algorithm, F is a logical function, and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).

5. Example using OFB mode

According to an embodiment of the present embodiments, as illustrated in FIG. 13a, the data encryption apparatus 100 may encrypt data using the OFB mode.
Referring to FIG. 13a, the encryptor 130 may generate a first ciphertext block (a ciphertext block 1) by applying the AES algorithm to an initialization vector IV, and then, performing the XOR operation on a block generated by applying the AES algorithm to the initialization vector IV and a first plaintext block (a plaintext block 1).
Then, the encoder 150 may generate ciphertext blocks 2 to 4 by repeatedly applying a logical function to a block generated by applying the AES algorithm to the initialization vector IV, and then, performing an XOR operation on a result of repeatedly applying the logical function and each of plaintext blocks 2 to 4.
In detail, the encryption operation illustrated in FIG. 13a may be expressed by Equation 19 below.
where E^BLOCK represents a block encryption algorithm, IV represents an initialization vector, O_l represents a block generated by applying the block encryption algorithm to the initialization vector IV, C_i represents an i^th ciphertext block, O_i represents a block generated by applying a logical function to the O_l i-1 times, P_i represents an i^th plaintext block, F represents a logical function, and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).
As illustrated in FIG. 13b, the data decryption apparatus 200 may perform a decryption operation on the data encrypted as illustrated in FIG. 13a.
Referring to FIG. 13b, the decryptor 210 may generate the first plaintext block (the plaintext block 1) by applying the AES algorithm to the initialization vector IV, and then, performing the XOR operation on a result of applying the AES algorithm to the initialization vector IV and the first ciphertext block (the ciphertext block 1).
Then, the decoder 230 may generate the plaintext blocks 2 to 4 by repeatedly applying a logical function to the block generated by applying the AES algorithm to the initialization vector IV, and then, performing the XOR operation on a result of repeatedly applying the logical function and each of the ciphertext blocks 2 to 4.
In detail, the decryption operation illustrated in FIG. 13b may be expressed by Equation 20 below.
where E^BLOCK represents a block encryption algorithm, IV represents an initialization vector, O_l represents a block generated by applying the block encryption algorithm to the initialization vector IV, C_i represents an i^th ciphertext block, O_i represents a block generated by applying a logical function to the initialization vector IV i times, P_i represents an i^th plaintext block, F represents a logical function, and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).
According to another embodiment of the present embodiments, the data encryption apparatus 100 may encrypt data using the OFB mode as illustrated in FIG. 14a,
Referring to FIG. 14a, the encryptor 130 may generate a first ciphertext block (a ciphertext block 0) by applying the AES algorithm to an initialization vector IV.
Then, the encoder 150 may generate ciphertext blocks 1 to 4 by repeatedly applying a logical function to the initialization vector IV, and then, performing the XOR operation on a result generated by repeatedly applying the logical function to the initialization vector IV and each of plain blocks 1 to 4.
In detail, the encryption operation illustrated in FIG. 14a may be expressed by Equation 21 below.
where C_i represents an i^th ciphertext block, O_i represents a block generated by applying a logical function to the initialization vector IV i times, P_i represents an it^h plaintext block, IV represents an initialization vector, E^BLOCK represents a block encryption algorithm, F represents a logical function, and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).
As illustrated in FIG. 14b, the data decryption apparatus 200 may perform a decryption operation on the data encrypted as illustrated in FIG. 14a.
Referring to FIG. 14b, the decryptor 210 may generate the initialization vector IV by applying the AES algorithm to the first ciphertext block (the ciphertext block 0).
Then, the decoder 230 may generate the plaintext blocks 1 to 4 by repeatedly applying a logical function to the initialization vector IV, and then, performing the XOR operation on a block generated by repeatedly applying the logical function to the initialization vector IV and each of the ciphertext blocks 1 to 4.
In detail, a decryption operation illustrated in FIG. 14b may be expressed by in Equation 22 below.
where C_i represents an i^th ciphertext block, O_i represents a block generated by applying a logical function to the initialization vector IV i times, P_i represents an i^th plaintext block, IV represents an initialization vector, E^BLOCK represents a block encryption algorithm, F represents a logical function, and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).

6. Example using CTR mode

According to an embodiment of the present embodiments, as illustrated in FIG. 15a, the data encryption apparatus 100 may encrypt data using the CTR mode.
Referring to FIG. 15a, the encryptor 130 may generate a ciphertext block 0 by applying the AES algorithm to an initial counter value CTR.
Then, the encoder 150 may generate a ciphertext block 1 by performing the XOR operation on the initial counter value CTR and a plaintext block 1.
Similarly, the encoder 150 may generate an i^th ciphertext block by performing the XOR operation on an i^th plaintext block and an i^th counter value (for example, CTR+i-1 as illustrated in FIG. 15a). In this case, the encoder 150 may generate ciphertext blocks in parallel.
In detail, the encryption operation illustrated in FIG. 15a may be expressed by Equation 23 below.
where E^BLOCK represents the block encryption algorithm, CTR represents an initial counter value, C_i represents an i^th ciphertext block, P_i represents an i^th plaintext block, and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).
As illustrated in FIG. 15b, the data decryption apparatus 200 may perform a decryption operation on the data encrypted as illustrated in FIG. 15a.
Referring to FIG. 15b, the decryptor 210 may generate an initial counter value by applying the AES algorithm to the ciphertext block 0.
Then, the decoder 230 may generate the plaintext block 1 by performing the XOR operation on the initial counter value CTR and the ciphertext block 1.
Similarly, the decoder 230 may generate the i^th plaintext block by performing the XOR operation on the i^th ciphertext block and the i^th counter value (for example, CTR+i-1 as illustrated in FIG. 15b). The decryptor 210 may generate plaintext blocks in parallel.
In detail, the decryption operation illustrated in FIG. 15b may be expressed by Equation 24 below.
where E^BLOCK represents a block encryption algorithm, CTR represents an initial counter value, C_i represents an i^th ciphertext block, P_i represents an i^th plaintext block, and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).
According to another embodiment of the present embodiments, the data encryption apparatus 100 may encrypt data using the CTR mode as illustrated in FIG. 16a.
Referring to FIG. 16a, the encryptor 130 may generate a ciphertext block 0 by applying the AES algorithm to an initial counter value CTR.
Then, the encoder 150 may generate a ciphertext block 1 by applying a logical function to the initial counter value CTR, and then, performing the XOR operation on a result of applying the function to the initial counter value CTR and a plaintext block 1.
Similarly, the encoder 150 may generate an i^th ciphertext block by applying a logical function to an i^th counter value (for example, CTR+i-1 as illustrated in FIG. 16a), and then, performing the XOR operation on a result of applying the logical function to the i^th counter value and an ith plaintext block. The encoder 150 may generate ciphertext blocks in parallel.
In detail, the encryption operation illustrated in FIG. 16a may be expressed by Equation 25 below.
where E^BLOCK represents the block encryption algorithm, CTR represents an initial counter value, C_i represents an i^th ciphertext block, P_i represents an i^th plaintext block, F represents a logical function, and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).
As illustrated in FIG. 16b, the data decryption apparatus 200 may perform a decryption operation on the data encrypted according to the example illustrated in FIG. 16a.
Referring to FIG. 16b, the decryptor 210 may generate the initial counter value CTR by applying the AES algorithm to the first ciphertext block (the ciphertext block 0).
Then, the decoder 230 may generate the plaintext block 1 by applying a logical function to the initial counter value CTR, and then, performing the XOR operation on a result of applying the logical function to the initial counter value CTR and the ciphertext block 1.
Similarly, the decoder 230 may generate the i^th plaintext block by applying a logical function to the i^th counter value (for example, CTR+i-1 as illustrated in FIG. 16b), and then, performing the XOR operation on a result of applying the logical function to the i^th counter value and the i^th ciphertext block. The decoder 230 may generate plaintext blocks in parallel.
In detail, the decryption operation illustrated in FIG. 16b may be expressed by Equation 26 below.
where E^BLOCK represents a block encryption algorithm, CTR represents an initial counter value, C_i represents an i^th ciphertext block, P_i represents an i^th plaintext block, F represents a logical function, and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).
According to another embodiment of the present embodiments, the data encryption apparatus 100 may encrypt data using the CTR mode as illustrated in FIG. 17a.
Referring to FIG. 17a, the encryptor 130 may generate a ciphertext block 1 by applying the AES algorithm to an initial counter value CTR, and then, performing the XOR operation on a result of applying the AES algorithm to the initial counter value CTR and a plaintext block 1.
Then, the encoder 150 may generate an i^th ciphertext block by applying a logical function to an i^th counter value (for example, CTR+i-1 as illustrated in FIG. 17a), and then, performing the XOR operation on a result of applying the logical function to the i^th counter value and an i^th plaintext block. The encoder 150 may generate ciphertext blocks in parallel.
In detail, the encryption operation illustrated in FIG. 17a may be expressed by Equation 27 below.
where E^BLOCK represents the block encryption algorithm, CTR represents an initial counter value, C_i represents an i^th ciphertext block, P_i represents an i^th plaintext block, F represents a logical function, and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).
As illustrated in FIG. 17b, the data decryption apparatus 200 may perform a decryption operation on the data encrypted as illustrated in FIG. 17a.
Referring to FIG. 17b, the decryptor 210 may generate the plaintext block 1 by applying the AES algorithm to the first ciphertext block 1, and then, performing the XOR operation on a result of applying the AES algorithm to the first ciphertext block 1 and the ciphertext block 1.
Then, the decoder 230 may generate the i^th plaintext block by applying a logical function to the i^th counter value (for example, CTR+i-1 as illustrated in FIG. 17b), and then, performing the XOR operation on a result of applying the logical function to the i^th counter value and the i^th ciphertext block. The decoder 230 may generate plaintext blocks in parallel.
In detail, the decryption operation illustrated in FIG. 17b may be expressed by Equation 28 below.
where E^BLOCK represents the block encryption algorithm, CTR represents an initial counter value, C_i represents an i^th ciphertext block, P_i represents an i^th plaintext block, F represents a logical function, and XOR represents an XOR operation performed between blocks (for example, a bitwise XOR operation when each of the blocks is a bit sequence).
FIG. 18 is a flowchart of a data encryption method according to an embodiment of the present embodiments.
The data encryption method of FIG. 18 may be performed by, for example, the data encryption apparatus 100 of FIG. 1.
Referring to FIG. 18, the data encryption apparatus 100 divides plaintext data to be encrypted into a plurality of plaintext blocks (S1810).
Next, the data encryption apparatus 100 encrypts at least one among some of the plurality of plaintext blocks and an initial value using the cryptographic key-based block encryption scheme (S1820).
Thereafter, the data encryption apparatus 100 encodes the remaining plaintext blocks, which have not been encrypted, using a non-cryptographic key-based encoding scheme (S1830).
FIG. 19 is a flowchart of a data decryption method according to an embodiment of the present embodiments.
The data decryption method of FIG. 19, may be performed by, for example, the data decryption apparatus 200 of FIG. 2.
Referring to FIG. 19, the data decryption apparatus 200 decrypts at least one among some blocks of encrypted data and an initial value using the cryptographic key-based block decryption scheme (S1910).
Next, the data encryption apparatus 200 decodes the remaining blocks of the encrypted data, which have not been decrypted, using the non-cryptographic key-based decoding scheme (S1920).
Embodiments may include a computer-readable storage medium having stored therein a program for executing the methods described herein on a computer. The computer-readable storage medium may include program commands, local data files, local data structures, or a combination thereof. The computer-readable storage medium may be specially designed and configured for the present embodiments. Examples of the computer-readable storage medium include magnetic media such as a hard disk, a floppy disk, and a magnetic tape, optical media such as CD-ROM and a DVD, magneto-optical media such as a floptical disk and hardware devices, such as a ROM, a RAM and a flash memory, specially designed to store and carry out programs. Examples of the program commands may include not only a machine language code made by a complier but also high-level language code executable in a computer using by an interpreter or the like.
While exemplary embodiments of the present embodiments have been described above in detail, it may be understood by one of ordinary skill in the art that various changes may be made without departing from the scope of the present embodiments. Therefore, the scope of the present embodiments should be defined not by the detailed description, but by the appended claims and equivalents thereof.

[Reference Numerals]

100: Data encryption apparatus
110: Divider
130: Encryptor
150: Encoder
170: Initial value generator
200: Data decryption apparatus
210: Decryptor
230: Decoder
250: Initial value generator

Claims

A data encryption apparatus (100) comprising:
a divider (110) configured to divide (S1810) data into a plurality of data blocks;

an encryptor (130) configured to encrypt (S1820) at least one data block from a first data block group comprising one or more data blocks, among the plurality of data blocks, and an initial value using a cryptographic key-based block encryption scheme; and

an encoder (150) configured to sequentially encode (S1830), using an encoding scheme which is not based on a cryptographic key, remaining data blocks from a second data block group comprising one or more data blocks, which are not encrypted by the cryptographic key-based block encryption scheme, among the plurality of data blocks, wherein each of the remaining data blocks is encoded using either an encrypted or encoded data block generated in the preceding encryption or encoding operation, or the encrypted or encoded data block generated in the preceding encryption or encoding operation and the data block used in the preceding encryption or encoding operation.
The data encryption apparatus (100) of claim 1, wherein the cryptographic key-based block encryption scheme comprises one of an encryption scheme using a symmetric key, an encryption scheme using an asymmetric key and a white box-based encryption scheme.
The data encryption apparatus (100) of claim 1,
wherein the encoding scheme which is not based on a cryptographic key comprises an encoding scheme using at least one among a logical operation, a one-way function, a one-way permutation, and a logical function.
The data encryption apparatus (100) of claim 1, wherein the initial value comprises an initialization vector or a counter value.
The data encryption apparatus (100) of claim 4, wherein the encryptor (130) encrypts the at least one data block from the first data block group using the initialization vector or the counter value.
A data decryption apparatus (200) comprising:
a decryptor (210) configured to decrypt (S1910) one or more first data blocks of an encrypted data and an initial value using a cryptographic key-based block decryption scheme; and

a decoder (230) configured to sequentially decode (S1920) remaining second data blocks of the encrypted data different from the one or more first data blocks, using a decoding scheme which is not based on a cryptographic key, wherein each of the remaining second data blocks is decoded using either an encrypted or encoded data block used in the preceding decryption or decoding operation, or a decrypted or decoded data block generated in the preceding decryption or decoding operation and the encrypted or encoded data block used in the preceding decryption or decoding operation.
The data decryption apparatus (200) of claim 6, wherein the cryptographic key-based block decryption scheme comprises one of a decryption scheme using a symmetric key, a decryption scheme using an asymmetric key and a white box-based decryption scheme.
The data decryption apparatus (200) of claim 6, wherein the decoding scheme which is not based on a cryptographic key comprises a decoding scheme using at least one among a logical operation, a one-way function, a one-way permutation, and a logical function.
A data encryption method comprising:
dividing (S1810) data into a plurality of data blocks;

encrypting (S1820) at least one data block from a first data block group comprising one or more data blocks, among the plurality of data blocks, and an initial value using a cryptographic key-based block encryption scheme; and

sequentially encoding (S1830) remaining data blocks, which are not encrypted by the cryptographic key-based block encryption scheme, using an encoding scheme which is not based on a cryptographic key, wherein each of the remaining data blocks is encoded using either an encrypted or encoded data block generated in the preceding encryption or encoding operation, or the encrypted or encoded data block generated in the preceding encryption or encoding operation and the data block used in the preceding encryption or encoding operation.
The data encryption method of claim 9, wherein the cryptographic key-based block encryption scheme comprises one of an encryption scheme using a symmetric key, an encryption scheme using an asymmetric key and a white box-based encryption scheme.
The data encryption method of claim 9, wherein the encoding scheme which is not based on a cryptographic key comprises an encoding scheme using at least one among a logical operation, a one-way function, a one-way permutation, and a logical function.
The data encryption method of claim 9, further comprising:
the initial value comprising an initialization vector or a counter value.
The data encryption method of claim 9, wherein the encrypting of at least one data block from the first data block group comprises encrypting the at least one data block from the first data block group using the initialization vector or the counter value.
A data decryption method comprising:
decrypting (S1910) one or more first data blocks of an encrypted data and an initial value using a cryptographic key-based block decryption scheme; and

sequentially decoding (S1920) remaining second data blocks of the encrypted data different from the one or more first data blocks, using a decoding scheme which is not based on a cryptographic key, wherein each of the remaining second data blocks is decoded using either an encrypted or encoded data block used in the preceding decryption or decoding operation, or a decrypted or decoded data block generated in the preceding decryption or decoding operation and the encrypted or encoded data block used in the preceding decryption or decoding operation.
The data decryption method of claim 14, wherein the cryptographic key-based block decryption scheme comprises one of a decryption scheme using a symmetric key, a decryption scheme using an asymmetric key and a white box-based decryption scheme, and/or wherein the decoding scheme which is not based on a cryptographic key comprises a decoding scheme using at least one among a logical operation, a one-way function, a one-way permutation, and a logical function.